CCP Role in Phase 4 (Evaluation of Outstanding Assessment POA&M Items) CCP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   During which phase of the CMMC assessment process are outstanding POA&M items evaluated for closure?

   • APhase 1: Pre-Assessment
   • BPhase 2: On-Site Assessment
   • CPhase 3: Post-Assessment
   • DPhase 4: Evaluation of Outstanding Assessment POA&M Items
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A CCP is evaluating a POA&M item for system integrity. The OSC provided a new patch management procedure and a log of patches. The log shows that patches were applied, but the procedure is not followed consistently. What is the most appropriate action?

   • AAccept the evidence because the log demonstrates patching.
   • BDocument the item as partially addressed and recommend additional remediation.
   • CMark the item as closed because patches were applied.
   • DEscalate the issue to the CMMC AB because the OSC is non-compliant.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary objective of Phase 4 in the CMMC assessment process?

   • ATo perform the initial on-site assessment of all security controls
   • BTo prepare the final assessment report for the organization
   • CTo conduct the initial scoping and asset inventory of the organization
   • DTo evaluate and close out outstanding POA&M items from the assessment
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What should be documented for each POA&M item after evaluation?

   • AThe status of the item: closed, partially addressed, or still open
   • BThe names of all personnel involved in remediation
   • CThe organization's internal remediation plan
   • DThe organization's budget for remediation
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   During Phase 4, a CCP is evaluating a POA&M item for security awareness training. The OSC provided training records for 90% of employees. The remaining 10% have not completed the training. What is the appropriate documentation of this item?

   • AOpen, because no evidence was provided.
   • BPartially addressed, because not all employees have completed the training.
   • CClosed, with a note to follow up later.
   • DClosed, because the majority of employees completed the training.
   Reveal Solution Discussion Select an answer first